Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ULKV1zCnpiva8GLg3w2GEE4xG2I.roa
File:                     ULKV1zCnpiva8GLg3w2GEE4xG2I.roa (raw, json)
Hash identifier:          nabOo+h5FpRtXp3S9305KOBzweQ8O5sVZ8p9/Nhuvz0=
Subject key identifier:   50:B2:95:D7:30:A7:A6:2B:DA:F0:62:E0:DF:0D:86:10:4E:31:1B:62
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1BD5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ULKV1zCnpiva8GLg3w2GEE4xG2I.roa
Signing time:             Wed 29 Sep 2021 02:47:03 +0000
ROA not before:           Wed 29 Sep 2021 02:47:03 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.195.128.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7125 (0x1bd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:03 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=50B295D730A7A62BDAF062E0DF0D86104E311B62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:02:55:f3:bf:7d:60:e6:62:7f:d2:bd:59:b2:
                    74:0a:b8:4e:21:9f:bc:38:76:d1:27:b2:c3:e3:0c:
                    33:8d:33:30:7c:d2:a8:fc:17:80:29:e4:0a:a8:55:
                    c8:db:d6:96:16:a3:b4:75:f0:d2:db:91:57:a2:3a:
                    51:6a:85:d6:4c:2f:a8:0b:47:16:bd:7e:09:1a:79:
                    f8:7b:69:ed:ab:af:ac:39:0b:1c:2a:58:b5:2e:4f:
                    14:66:d9:14:f8:4e:d7:e8:44:13:f0:bd:c0:c3:79:
                    a1:24:49:1f:b4:ed:7f:9a:fc:6a:15:b3:cf:05:c8:
                    09:27:41:8c:cb:dc:59:8a:c1:22:83:b3:0a:03:1f:
                    93:a9:e9:d4:bf:0b:92:b8:b6:93:71:f7:fb:72:53:
                    82:5c:2a:d0:8e:f3:a7:62:2e:21:f0:ca:a7:2f:bd:
                    55:43:06:99:05:84:9c:4e:52:35:8a:f7:97:ee:bf:
                    6a:b9:d1:cd:51:d0:78:d8:6b:14:4e:5a:b6:81:9e:
                    44:fa:fc:12:a8:54:58:72:00:27:ac:8a:63:9a:10:
                    d6:ea:59:04:08:9b:cc:9c:eb:02:d4:95:13:64:bc:
                    b4:c9:40:d5:46:81:59:b7:21:c7:95:d1:3d:ab:03:
                    e5:49:20:b4:29:dc:6f:22:b3:5f:9b:50:08:b9:03:
                    8a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B2:95:D7:30:A7:A6:2B:DA:F0:62:E0:DF:0D:86:10:4E:31:1B:62
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ULKV1zCnpiva8GLg3w2GEE4xG2I.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:84:99:cd:aa:5e:0e:97:15:6b:a4:45:94:1f:eb:dc:38:de:
         c8:e2:4c:d0:5d:6d:a8:33:85:8f:29:a0:3f:9d:88:0b:2d:59:
         23:1f:6e:52:66:e5:a0:2d:00:41:a1:f3:7c:fa:ba:b8:35:0a:
         fa:20:c0:27:27:cf:1b:95:a8:9b:7d:a7:e6:ac:09:4c:d8:62:
         f8:fe:bd:33:65:95:ba:9d:22:81:b6:06:ef:d0:ad:a1:38:45:
         d4:5f:33:4b:43:48:09:3a:f1:fc:af:a7:31:ae:d7:19:67:a5:
         7e:78:1b:f4:42:b3:9f:25:3a:f9:8f:76:09:4d:4a:f8:ea:cc:
         d1:e9:04:31:dd:b9:03:c6:f6:b7:87:3a:43:92:d6:0e:2d:41:
         90:ac:be:f9:78:7d:ef:82:aa:0a:b5:5d:ea:50:e3:3b:b8:7e:
         67:bb:c5:a0:04:68:23:1d:e8:48:c3:16:07:d6:42:f3:f7:d9:
         f2:8c:2b:89:04:09:2f:98:40:0f:a6:ca:db:d9:bf:11:31:12:
         2e:58:84:e9:f1:1d:86:9a:48:dd:42:51:bb:1d:d8:b0:98:8c:
         99:fa:6d:3b:67:64:20:b3:5b:c1:f8:c2:45:54:e1:4d:f2:5e:
         2e:2b:5d:87:db:0a:81:7c:4c:a8:43:d9:f8:7f:b2:dc:ea:72:
         5d:10:89:e3
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICG9UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ3MDNaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDUwQjI5NUQ3MzBBN0E2
MkJEQUYwNjJFMERGMEQ4NjEwNEUzMTFCNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtAlXzv31g5mJ/0r1ZsnQKuE4hn7w4dtEnssPjDDONMzB80qj8
F4Ap5AqoVcjb1pYWo7R18NLbkVeiOlFqhdZML6gLRxa9fgkaefh7ae2rr6w5Cxwq
WLUuTxRm2RT4TtfoRBPwvcDDeaEkSR+07X+a/GoVs88FyAknQYzL3FmKwSKDswoD
H5Op6dS/C5K4tpNx9/tyU4JcKtCO86diLiHwyqcvvVVDBpkFhJxOUjWK95fuv2q5
0c1R0HjYaxROWraBnkT6/BKoVFhyACesimOaENbqWQQIm8yc6wLUlRNkvLTJQNVG
gVm3IceV0T2rA+VJILQp3G8is1+bUAi5A4otAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUULKV1zCnpiva8GLg3w2GEE4xG2IwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1VMS1YxekNucGl2YThHTGcz
dzJHRUU0eEcySS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
w4AwDQYJKoZIhvcNAQELBQADggEBAD2Emc2qXg6XFWukRZQf69w43sjiTNBdbagz
hY8poD+diAstWSMfblJm5aAtAEGh83z6urg1CvogwCcnzxuVqJt9p+asCUzYYvj+
vTNllbqdIoG2Bu/QraE4RdRfM0tDSAk68fyvpzGu1xlnpX54G/RCs58lOvmPdglN
SvjqzNHpBDHduQPG9reHOkOS1g4tQZCsvvl4fe+Cqgq1XepQ4zu4fme7xaAEaCMd
6EjDFgfWQvP32fKMK4kECS+YQA+mytvZvxExEi5YhOnxHYaaSN1CUbsd2LCYjJn6
bTtnZCCzW8H4wkVU4U3yXi4rXYfbCoF8TKhD2fh/stzqcl0QieM=
-----END CERTIFICATE-----